Privacy Policy

1. Who we are

Peritale is a perimenopause wellness companion operated by MARKABLE Ltd. ("we", "us", "our"). Peritale is a general wellness product, not a medical device. It is not intended to diagnose, treat, cure, or prevent any disease or medical condition. This policy explains how we handle personal data of users in Singapore in accordance with the Personal Data Protection Act 2012 (the "PDPA"). MARKABLE Ltd. is the organisation responsible for your personal data.

2. Your rights under the PDPA

The PDPA gives you a clear set of protections. In plain terms, we will:

• Seek your consent before collecting, using, or disclosing your personal data, and let you withdraw it.
• Tell you the purpose (the Notification and Purpose Limitation obligations) and use your data only for those purposes.
• Give you access to the personal data we hold about you and how it has been used, and correct it on request.
• Protect your data with reasonable security arrangements.
• Not keep your data longer than needed (the Retention Limitation obligation).
• Notify you and the Personal Data Protection Commission (PDPC) of a notifiable data breach.

You may lodge a complaint with the PDPC at pdpc.gov.sg if you believe we have not met these obligations.

3. What we collect

Information you provide

• Account information: email address, name (optional), and age range.
• Symptom data: selections from our wellness questionnaire.
• THINK and SENSE data: performance metrics from brief cognitive and sensory exercises (such as reaction time and accuracy).
• Communications: messages you send us by email or contact form.

Information collected automatically

• Device information: browser type, operating system, and screen resolution.
• Usage data: pages visited, time on site, and referral source.

4. Your selfie and facial geometry

This section matters most, so we are explicit about it. The facial geometry derived from your selfie is biometric personal data, and we treat it accordingly.

• Separate consent: we ask for your specific consent before we capture your selfie. You can decline and still use other parts of Peritale.
• Processing: your selfie is analysed to extract numerical wellness data points (texture, tone, and volume measurements).
• Storage: your facial image is stored in encrypted form, only where you have consented, so we can generate your wellness picture and track how it moves over time.
• Never sold: your facial data is never sold, traded, or made available to third parties.
• No identification: we do not use your image for facial recognition or identity verification, only for wellness pattern analysis.
• Deletable: you can withdraw your consent and request deletion of your stored images at any time.

5. Purposes we use your data for

In line with the PDPA Purpose Limitation obligation, we use your data only to:

• generate your personal perimenopause wellness picture;
• track your own picture over time across multiple reads;
• create your summary to bring to a healthcare provider;
• improve our wellness models using anonymised, aggregated data only;
• send you your results and, if you opt in, wellness updates;
• respond to your questions and support requests; and
• meet our legal obligations.

We do not sell your data, build advertising profiles, perform facial recognition, or make medical diagnoses.

6. Consent and how to withdraw it

We rely on your consent to collect, use, and disclose your personal data for the purposes above. You may withdraw consent for any purpose at any time by emailing privacy@peritale.online. We will tell you the likely consequences of withdrawal (for example, that we can no longer generate or track your wellness picture), and we will stop the relevant processing within a reasonable time.

7. Who we disclose data to

We disclose personal data only to:

• Service providers (data intermediaries): hosting on Cloudflare Pages, analytics (Google Analytics 4 and Microsoft Clarity, which load only after you consent), web fonts (currently served by Google Fonts), and payment processing. They process data on our behalf under contractual obligations consistent with the PDPA.
• At your direction: when you choose to share your wellness summary with a healthcare provider.
• Legal requirements: where required by law, court order, or a lawful request from a public agency.

We do not sell, trade, or rent your personal data to anyone.

8. Visitor counting and analytics

To understand how many people visit our pages, we send a lightweight visitor signal to a privacy-friendly counter we run on a Cloudflare Worker. This signal contains only the page path you viewed (for example, "/sg/privacy-policy") and no personal data, name, email, or account identifier.

We also use analytics, but only after you accept them in our cookie banner. Until you choose to accept, no analytics cookies are set: our consent mechanism (Google Consent Mode) defaults to denied, and a "Cookie settings" control on every page lets you change or withdraw your choice at any time. When you consent, we load Google Analytics 4 (measurement ID G-9GKG02ZL9Z) to understand, in aggregate, how the site is used, and Microsoft Clarity for aggregated, anonymised session insights and heatmaps that help us improve usability. Essential cookies, which remember your consent choice, set no analytics. Our pages currently load web fonts from Google Fonts, so your browser connects to Google and your IP address is processed by Google to deliver the fonts; we are moving to self-hosted fonts. We do not use advertising cookies, retargeting pixels, or social media tracking pixels.

9. Transfers outside Singapore

MARKABLE Ltd. operates from Israel, and our service providers may process data in other countries. Where personal data is transferred outside Singapore, we take reasonable steps to ensure a comparable standard of protection through contractual safeguards, as required by the PDPA Transfer Limitation obligation.

10. Access and correction

Under the PDPA you may ask us for access to the personal data we hold about you and information on how it has been used or disclosed in the past year, and you may ask us to correct any error or omission. To make a request, email privacy@peritale.online. We will respond as soon as reasonably possible, and where we cannot do so within 30 days we will tell you when to expect a response.

11. Retention and deletion

• Wellness data: kept while your account is active, or until you request deletion.
• Facial images: kept in encrypted form while your account is active, and deleted on account deletion or on your request.
• Anonymised data: aggregated, de-identified data may be retained for product improvement.
• Account data: deleted within 30 days of an account deletion request, unless retention is required by law.

12. Protection of your data

We apply reasonable security arrangements to protect your personal data, including:

• encryption in transit (TLS) and at rest;
• access controls and authentication;
• regular security assessments; and
• secure data processing practices.

No method of transmission over the Internet is completely secure. While we work hard to protect your data, we cannot guarantee absolute security.

13. Data breach notification

If a data breach occurs that is likely to result in significant harm to you, or is of a significant scale, we will notify the Personal Data Protection Commission, and affected individuals, in accordance with the PDPA's data breach notification requirements.

14. Marketing and Do Not Call

We will only send you marketing or wellness messages where you have opted in, and you can opt out at any time using the link in the message or by emailing us. If you provide a Singapore telephone number and we ever contact you by telephone, SMS, or fax for marketing, we will comply with the Do Not Call (DNC) provisions of the PDPA and check the relevant DNC registers before doing so.

15. Children

Peritale is designed for adult women in midlife and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. We will post any changes on this page and update the "Last updated" date above. Material changes will be notified before they take effect.

17. Contact and our Data Protection Officer

For any privacy question, to exercise your rights, or to reach our Data Protection Officer:

• Privacy and data requests: privacy@peritale.online
• General contact: hello@peritale.online

Organisation responsible for your data: MARKABLE Ltd.